Browser fingerprinting is the identification of a browser through the network traffic captured during communication between the browser and server. This can be done using the HTTP protocol, browser extensions, and other methods. This paper discusses browser fingerprinting using the HTTPS over TLS 1.3 protocol. The study observed that different browsers use a different number of messages to communicate with the server, and the length of messages also varies. To conduct the study, a network was set up using a UTM hypervisor with one virtual machine as the server and another as a VM with a different browser. The communication was captured, and it was found that there was a 30\%-35\% dissimilarity in the behavior of different browsers.
翻译:浏览器指纹识别是指通过捕获浏览器与服务器通信过程中的网络流量来识别浏览器的方法。该技术可通过HTTP协议、浏览器扩展及其他手段实现。本文探讨了基于TLS 1.3协议下HTTPS的浏览器指纹识别技术。研究发现,不同浏览器与服务器通信时使用的消息数量存在差异,消息长度亦有所不同。为开展研究,我们采用UTM管理程序构建网络环境,其中一台虚拟机作为服务器,另一台搭载不同浏览器的虚拟机作为客户端。通过捕获通信流量分析发现,不同浏览器的行为特征存在30%-35%的差异度。